I'm keeping my private key in
But that means every user process can steal my private key which would be disastrous, I'm not going around running random executables, but how can you be sure no one reads it, if you are not compiling everything on your own? Can you spot if Google Chrome reads it?
I feel like I should employ security by obscurity.. like storing my private key in a random place and only letting SSH know the path (again maybe compiling my own executable, otherwise the hackers can just read the config value)
How do you keep your private files safe? Especially if you are managing many servers which allow access to this key.